基于广电云平台安全资源池的建设与应用实践

Construction and Application Practice of Security Resource Pool Based on Radio and Television Cloud Platform

本文通过构建多租户下统一的云安全资源池,实现了云安全的五个统一,为多用户提供Web应用防火墙、堡垒机、综合日志审计、数据库审计等十余种云安全服务,满足云安全的灵活、可靠、多样化的需求特性。同时,该云安全资源池在浙江省内广电多家单位落地实践,减少了传统硬件资源的购置,节约了安全建设项目的投资,助力各单位安全运维管理效能提升。

This paper achieves five unifications of cloud security by building a unified cloud security resource pool under multi-tenants,and provides more than ten cloud security services for multi-users,such as web application firewall,fortress machine,comprehensive log auditing,and database auditing,to help the flexible,reliable and diverse demand characteristics of cloud security.At the same time,the cloud security resource pool has been put into practice in many radio and television units in Zhejiang Province,which reduces the purchase of traditional hardware resources,saves investment in security construction projects,and helps to improve the efficiency of security operation and maintenance management of various units for reference by radio and television peers everywhere.